Vulnerability Development (thread)

APPLE-SA-2005-10-31 Mac OS X v10.4.3, noreply, 2005/10/31
SQL IN FORUM.PHP, ABDUCTER_MINDS, 2005/10/31
mwcollect v3.0.0 Release, Georg Wicherski, 2005/10/31
SQL In Invision Gallery 2.0.3, almaster, 2005/10/31
OpenVPN[v2.0.x]: foreign_option() formart string vulnerability., v9, 2005/10/31
[Full-disclosure] phpbb 2.0.18 release, Paul Laudanski, 2005/10/31
New List, David Ahmad, 2005/10/31
[Full-disclosure] Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability, Stefan Esser, 2005/10/31
[Full-disclosure] Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str(), Stefan Esser, 2005/10/31
[Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Stefan Esser, 2005/10/31
- [Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Matthew Murphy, 2005/10/31
  - Message not available
    - [Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Matthew Murphy, 2005/10/31
    - Re: [Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Stefan Esser, 2005/10/31
    - Re: [Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Florian Weimer, 2005/10/31
    - [Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Matthew Murphy, 2005/10/31
  - Re: [Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Florian Weimer, 2005/10/31
[Full-disclosure] Security, Hacking & Social Engineering Presentation., Emmanuel Goldstein, 2005/10/31
[Full-disclosure] Advisory 17/2005: phpBB Multiple Vulnerabilities, Stefan Esser, 2005/10/30
[Full-disclosure] [ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow, Sune Kloppenborg Jeppesen, 2005/10/30
[Full-disclosure] [ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors, Sune Kloppenborg Jeppesen, 2005/10/30
uplod phpshell in PHP Advanced Transfer Manager, sQl, 2005/10/29
- Re: uplod phpshell in PHP Advanced Transfer Manager, D_BuG, 2005/10/31
Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit, atmaca, 2005/10/29
Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images, preben, 2005/10/29
Remote MySQL User on Cpanel Default installation with blank password, sup3r_linux, 2005/10/29
Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte, Williams, James K, 2005/10/29
Remote File Inclusion in vCard :), [AT], 2005/10/29
[Full-disclosure] Trend Micro's Response to the Magic Byte Bug, Auri Rahimzadeh, 2005/10/29
[Full-disclosure] [USN-206-2] Fixed lynx packages for USN-206-1, Martin Pitt, 2005/10/28
[Full-disclosure] [USN-151-3] zlib vulnerabilities, Martin Pitt, 2005/10/28
File Including In PBLang, abducter_minds, 2005/10/28
[Full-disclosure] iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/28
[Full-disclosure] [USN-213-1] sudo vulnerability, Martin Pitt, 2005/10/28
[Full-disclosure] [USN-212-1] libgda2 vulnerability, Martin Pitt, 2005/10/28
MDKSA-2005:200 - Updated apache-mod_auth_shadow packages fix security restriction bypass issues., Mandriva Security Team, 2005/10/28
MDKSA-2005:201 - Updated sudo packages fix vulnerability, Mandriva Security Team, 2005/10/28
[ GLSA 200510-23 ] TikiWiki: XSS vulnerability, Thierry Carrez, 2005/10/28
- Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability, dave canuck, 2005/10/28
  - Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability, Thierry Carrez, 2005/10/28
[Full-disclosure] [ GLSA 200510-24 ] Mantis: Multiple vulnerabilities, Thierry Carrez, 2005/10/28
[Full-disclosure] [ GLSA 200510-22 ] SELinux PAM: Local password guessing attack, Thierry Carrez, 2005/10/28
[Full-disclosure] Multiple vulnerabilities within RockLiffe MailSite Express WebMail, Paul Craig, 2005/10/28
Secunia Research: ATutor Multiple Vulnerabilities, Secunia Research, 2005/10/27
fetchmail security announcement 2005-02 (CVE-2005-3088), ma+nomail, 2005/10/27
[Full-disclosure] [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection, CIRT.DK Advisory, 2005/10/27
[VulnWatch] fetchmail security announcement 2005-02 (CVE-2005-3088), ma+nomail, 2005/10/27
MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities, Mandriva Security Team, 2005/10/27
PHP-Nuke Cross-Site Scripting Vulnerability, bhfh01, 2005/10/27
MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities, Mandriva Security Team, 2005/10/27
MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities., Mandriva Security Team, 2005/10/27
MDKSA-2005:186-1 - Updated lynx packages fix remote buffer overflow, Mandriva Security Team, 2005/10/26
MDKSA-2005:197 - Updated unzip packages fix suid, permissions vulnerabilities., Mandriva Security Team, 2005/10/26
MDKSA-2005:195 - Updated squid packages fix vulnerabilities, Mandriva Security Team, 2005/10/26
MDKSA-2005:198 - Updated uim packages fix suid linking vulnerabilities., Mandriva Security Team, 2005/10/26
MDKSA-2005:193-1 - Updated ethereal packages fix multiple vulnerabilities, Mandriva Security Team, 2005/10/26
[KAPDA::#9] Techno Dreams Scripts Vulnerabilities, advisory, 2005/10/26
[Full-disclosure] Update for the magic byte bug, Andrey Bayora, 2005/10/26
Looking for security contacts at Sony and Lenovo (FKA IBM), Richard M. Smith, 2005/10/26
SQL-Injection in MyBulletinBoard allows attacker to become a board admin., Animal, 2005/10/26
Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability, Secunia Research, 2005/10/26
Woltlab Burning Board info_db.php multiple SQL injection, admin, 2005/10/26
Looking for a security contact at Macrovision/InstallShield, Richard M. Smith, 2005/10/26
MDKSA-2005:193 - Updated ethereal packages fix multiple vulnerabilities, Mandriva Security Team, 2005/10/26
SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all versions vulnerable), sikikmail, 2005/10/26
Network Appliance iSCSI Authentication Bypass, advisories, 2005/10/25
- Re: Network Appliance iSCSI Authentication Bypass, Steve Shockley, 2005/10/29
  - Re: Network Appliance iSCSI Authentication Bypass, steve . shockley, 2005/10/29
Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte, Andrey Bayora, 2005/10/25
- Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte, Bipin Gautam, 2005/10/28
Mozilla Thunderbird SMTP down-negotiation weakness, Thomas Henlich, 2005/10/25
- Re: Mozilla Thunderbird SMTP down-negotiation weakness, Jason Haar, 2005/10/26
  - Re: Mozilla Thunderbird SMTP down-negotiation weakness, Tony Finch, 2005/10/26
    - Re: Mozilla Thunderbird SMTP down-negotiation weakness, Bob Beck, 2005/10/29
    - Re: Mozilla Thunderbird SMTP down-negotiation weakness, Jason Haar, 2005/10/29
[Full-disclosure] phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Paul Laudanski, 2005/10/25
- Re: [Full-disclosure] phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Tatercrispies, 2005/10/25
  - [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Paul Laudanski, 2005/10/25
    - [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Tatercrispies, 2005/10/25
- [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Nicob, 2005/10/27
  - Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Tatercrispies, 2005/10/27
    - Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Nicob, 2005/10/27
  - [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Paul Laudanski, 2005/10/29
[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities, snsadv, 2005/10/25
[Full-disclosure] SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS, Bernhard Mueller, 2005/10/25
[Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability, Bernhard Mueller, 2005/10/25
- Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability, Florian Weimer, 2005/10/27
  - Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability, SEC Consult Research, 2005/10/27
Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through, Andrey Bayora, 2005/10/25
- Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through, Dave English, 2005/10/29
- Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through, Andreas Marx, 2005/10/26
  - Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through, Andrey Bayora, 2005/10/26
  - Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through, mgotts, 2005/10/29
    - Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through, Andrey Bayora, 2005/10/29
DboardGear - uncorrect import themes (SQL-inject), poizon, 2005/10/25
[Full-disclosure] Skype security advisory, . EADS CCR DCR/STI/C, 2005/10/25
[Full-disclosure] PHP iCalendar CSS, ascii, 2005/10/25
[Full-disclosure] [ GLSA 200510-21 ] phpMyAdmin: Local file inclusion and XSS vulnerabilities, Thierry Carrez, 2005/10/25
[Full-disclosure] [ GLSA 200510-20 ] Zope: File inclusion through RestructuredText, Thierry Carrez, 2005/10/25
[Full-disclosure] Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte, Andrey Bayora, 2005/10/25
- RE: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte, Debasis Mohanty, 2005/10/25
- RE: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte, Debasis Mohanty, 2005/10/27
  - Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte, Eygene A. Ryabinkin, 2005/10/27
    - Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte, Andrey Bayora, 2005/10/27
Flat Nuke Cross Site Scripting, alex, 2005/10/24
[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/24
Nuked klan 1.7: SQL vulnerability, papipsycho, 2005/10/24
[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/24
[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/24
Nuked klan 1.7: Remote Exploit, papipsycho, 2005/10/24
Zomplog Script Injection Vulnerability =>3.4 (all versions vulnerable), sikikmail, 2005/10/24
File Including In FLAT NUKE, abducter_minds, 2005/10/24
SQL saphp Lesson, almaster, 2005/10/24
[KAPDA::#8] Domain Manager Pro Vulnerability, advisory, 2005/10/24
aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities, chburchert, 2005/10/24
Possible Bug in PHP-Fusion 6.0.204, peanut, 2005/10/24
- RE: Possible Bug in PHP-Fusion 6.0.204, Paul, 2005/10/25
[security bulletin] SSRT051055 rev.0 - HP Oracle for OpenView (OfO) Critical Patch Update October 2005, security-alert, 2005/10/24
Insecure Temporary Files in BMC/Control-M Agent, Scott Cromar, 2005/10/24
Nuked klan 1.7: Bypassed level admin on forum(corrected), papipsycho, 2005/10/24
TSLSA-2005-0059 - multi, Trustix Security Advisor, 2005/10/24
Remote File Inclusion in forum PunBB, rod hedor, 2005/10/24
- Re: Remote File Inclusion in forum PunBB, arpen, 2005/10/29
phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., alphakgen, 2005/10/24
PhpNuke 7.8 with all security fixes/patches "Your_Account", "Downloads", "Web Links" SQL Injection / Remote commans execution, retrogod, 2005/10/24
SUSE Security Announcement: permissions (SUSE-SA:2005:062), Ludwig Nussel, 2005/10/24
DBoardGear SQL Injection, almaster, 2005/10/24
DCP - portal XSS & SQL attacks, alex, 2005/10/24
[Full-disclosure] Revised draft on ICMP attacks, Fernando Gont, 2005/10/24
[Full-disclosure] php < 4.4.1 htaccess apache dos, Eric Romang / ZATAZ.com, 2005/10/24
[Full-disclosure] vhost enumeration, unknown unknown, 2005/10/24
[Full-disclosure] Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability, Stefan Esser, 2005/10/24
[Full-disclosure] [ GLSA 200510-19 ] cURL: NTLM username stack overflow, Thierry Carrez, 2005/10/24
Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability PoC, ppwd25, 2005/10/24
[security bulletin] SSRT051052 rev.1 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access, security-alert, 2005/10/24
[SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability, snsadv, 2005/10/24
MDKSA-2005:192 - Updated xli packages fix buffer overflow vulnerabilities., Mandriva Security Team, 2005/10/24
MDKSA-2005:191 - Updated ruby packages fix safe level and taint flag protections vulnerability, Mandriva Security Team, 2005/10/24
MDKSA-2005:190 - Updated nss_ldap/pam_ldap packages fix privilege vulnerabilities., Mandriva Security Team, 2005/10/24
MDKSA-2005:189 - Updated imap packages fix buffer overflow vulnerabilities., Mandriva Security Team, 2005/10/24
Nuked klan 1.7: XSS vulnerability, papipsycho, 2005/10/24
MDKSA-2005:188 - Updated graphviz packages fix temporary file vulnerability., Mandriva Security Team, 2005/10/24
MDKSA-2005:187 - Updated dia packages fix python SVG import vulnerability., Mandriva Security Team, 2005/10/24
[Argeniss] Story of a dumb patch (Paper advisoryabout CSRSS and Windows Explorer vulnerabilities), Cesar, 2005/10/24
[Full-disclosure] F.E.A.R. 1.01 likes lithsock, Luigi Auriemma, 2005/10/24
[Full-disclosure] Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow, Secunia Research, 2005/10/24
[Full-disclosure] SEC-CONSULT-SA-20051021-0: Yahoo/MSIE XSS, Bernhard Mueller, 2005/10/24
[Full-disclosure] OpenServer 5.0.7 : authsh and backupsh buffer overflow, please_reply_to_security, 2005/10/24
[Full-disclosure] UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow, please_reply_to_security, 2005/10/24
[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation, iDEFENSE Labs, 2005/10/24
[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation, iDEFENSE Labs, 2005/10/24
[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/24
Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update October 2005, Integrigy Security, 2005/10/24
Oracle Workflow CSS Vulnerability wf_route, ak, 2005/10/24
Oracle Workflow CSS Vulnerability wf_monitor, ak, 2005/10/24
Oracle 10g - emagent.exe Stack-Based Overflow, SPI Labs, 2005/10/24
XSS & Path Disclosure in Chipmunk's products, alireza hassani, 2005/10/24
[security bulletin] SSRT051052 rev.0 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access, security-alert, 2005/10/24
[Full-disclosure] [USN-211-1] Enigmail vulnerability, Martin Pitt, 2005/10/24
[Full-disclosure] [ GLSA 200510-18 ] Netpbm: Buffer overflow in pnmtopng, Thierry Carrez, 2005/10/24
[Full-disclosure] [ GLSA 200510-17 ] AbiWord: New RTF import buffer overflows, Thierry Carrez, 2005/10/24
cacam_logsecurity_win32 exploit published on 20051018 by Metasploit, Williams, James K, 2005/10/24
SecurityAlert SA025 : PHPNuke Remote Directory Traversal, sp3x, 2005/10/24
SUSE Security Announcement: openSSL protocol downgrade attack (SUSE-SA:2005:061), Marcus Meissner, 2005/10/24
Metasploit Framework v2.5, H D Moore, 2005/10/24
[Full-disclosure] paros proxy v3.2.5 and below blank "sa" password, Andrew Christensen, 2005/10/24
Re: Require many large corporate emails for contact regarding vulnerability., dcrab, 2005/10/24
Multiple Critical and High Vulnerabilities in Oracle Database Server, NGSSoftware Insight Security Research, 2005/10/24
- Revision: Multiple Critical and High Vulnerabilities in Oracle Database Server, David Litchfield, 2005/10/24
Windows host based firewall tester, Tim, 2005/10/24
- Re: Windows host based firewall tester, Morten Torstensen, 2005/10/24
Linksys WRT54G/S Directory Traversal, Shell, 2005/10/24
e107 remote commands execution, retrogod, 2005/10/24
NetFlow Analyzer 4 XSS Vulnerability, why, 2005/10/24
MDKSA-2005:186 - Updated lynx packages fix remote buffer overflow, Mandriva Security Team, 2005/10/24
SECURECon 2006 Call for papers!, Will Belcher, 2005/10/24
[Full-disclosure] Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities, Secunia Research, 2005/10/24
[Full-disclosure] [USN-210-1] netpbm vulnerability, Martin Pitt, 2005/10/24
winrar 3.50 Exploit, edward11, 2005/10/17
Re: Aenovo Multiple Vulnerabilities (Patch), ali202, 2005/10/17
PHP local safedir restriction bypass, slythers, 2005/10/17
Yahoo RSS XSS Vulnerability, alljer, 2005/10/17
[OpenPKG-SA-2005.022] OpenPKG Security Advisory (openssl), OpenPKG, 2005/10/17
ie7 will have more mechanisms, liudieyu, 2005/10/17
SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060), Sebastian Krahmer, 2005/10/17
Yahoo RSS XSS Vulnerability (Correction), alljer, 2005/10/17
[Full-disclosure] [USN-208-1] SSH server vulnerability, Martin Pitt, 2005/10/17
- Re: [Full-disclosure] [USN-208-1] SSH server vulnerability, Martin Pitt, 2005/10/18
[Full-disclosure] [ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability, Sune Kloppenborg Jeppesen, 2005/10/17
[Full-disclosure] [ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing, Sune Kloppenborg Jeppesen, 2005/10/17
[Full-disclosure] [USN-208-1] graphviz vulnerability, Martin Pitt, 2005/10/17
[Full-disclosure] [USN-207-1] PHP vulnerability, Martin Pitt, 2005/10/17
[Full-disclosure] [USN-206-1] Lynx vulnerability, Martin Pitt, 2005/10/17
[Full-disclosure] flexbackup default config insecure temporary file creation, ZATAZ Audits, 2005/10/17
[Full-disclosure] [ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues, Thierry Carrez, 2005/10/17
[Full-disclosure] Lynx Remote Buffer Overflow, Ulf Harnhammar, 2005/10/17
[Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted, Thierry Zoller, 2005/10/16
- Re: [Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted, Clayton Kossmeyer, 2005/10/24
[Full-disclosure] Exploiting Windows Device Drivers Whitepaper, Piotr Bania, 2005/10/16
MDKSA-2005:185 - Updated koffice packages fix KWord RTF import overflow vulnerability, Mandriva Security Team, 2005/10/15
Security Contacr for Mycall, Fixer, 2005/10/15
[KAPDA::#6] Punbb SQL Injection Vulnerability, advisory, 2005/10/15
- Re: [KAPDA::#6] Punbb SQL Injection Vulnerability, arpen, 2005/10/24
  - Re: [KAPDA::#6] Punbb SQL Injection Vulnerability, alireza hassani, 2005/10/24
[Full-disclosure] [ GLSA 200510-13 ] SPE: Insecure file permissions, Thierry Carrez, 2005/10/15
MDKSA-2005:184 - Updated cfengine packages fix temporary file vulnerabilities, Mandriva Security Team, 2005/10/14
Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability, none, 2005/10/14
CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability, Williams, James K, 2005/10/14
- RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability, Williams, James K, 2005/10/24
MDKSA-2005:183 - Updated wget packages fix NTLM authentication vulnerability, Mandriva Security Team, 2005/10/14
Gallery 2.x Remote File Access Vulnerability, Bharat Mediratta, 2005/10/14
Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse, Seth Fogie, 2005/10/14
MDKSA-2005:182 - Updated curl packages fix NTLM authentication vulnerability, Mandriva Security Team, 2005/10/14
Google Talk cleartext proxy credentials vulnerability, m123303, 2005/10/14
- Re: Google Talk cleartext proxy credentials vulnerability, 3APA3A, 2005/10/15
RTasarim WebAdmin modul SQL injection, khc, 2005/10/14
[Full-disclosure] [USN-205-1] Curl and wget vulnerabilities, Martin Pitt, 2005/10/14
[Full-disclosure] [USN-204-1] SSL library vulnerability, Martin Pitt, 2005/10/14
[Full-disclosure] [ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow, Sune Kloppenborg Jeppesen, 2005/10/14
[security bulletin] SSRT5975 HP-UX Running on Itanium Platforms Local Denial of Service (DoS), Security Alert, 2005/10/13
[security bulletin] SSRT051041 rev.1 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS), security-alert, 2005/10/13
Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow, Secunia Research, 2005/10/13
[Full-disclosure] iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/13
[Full-disclosure] iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/13
Yapig: XSS / Code Injection Vulnerability, enji, 2005/10/13
[Full-disclosure] [USN-203-1] Abiword vulnerabilities, Martin Pitt, 2005/10/13
[Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service, Piotr Bania, 2005/10/13
- Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service, Paul Laudanski, 2005/10/17
honeypot and honeynet as IDS, Krish Mehak, 2005/10/13
ZDI-05-001: VERITAS NetBackup Remote Code Execution, zdi-disclosures, 2005/10/12
Re: VoIP-Phones: Weakness in proccessing SIP-Notify-Messages, Tobias Glemser, 2005/10/12
VERITAS NetBackup: Java User-Interface, format string vulnerability, secure, 2005/10/12
[SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability, Gary Oleary-Steele, 2005/10/12
Research for network security news article, lgreenem, 2005/10/12
MDKSA-2005:181 - Updated squid packages fix vulnerabilities, Mandriva Security Team, 2005/10/12
MDKSA-2005:178 - Updated squirrelmail packages fixes XSS vulberability, Mandriva Security Team, 2005/10/12
MDKSA-2005:179 - Updated openssl packages fix vulnerabilities, Mandriva Security Team, 2005/10/12
MDKSA-2005:180 - Updated xine-lib packages fixes cddb vulnerability, Mandriva Security Team, 2005/10/12
using php local file include vulnerabilities for command execution, Andreas Zeidler, 2005/10/12
- Re: using php local file include vulnerabilities for command execution, Andreas Zeidler, 2005/10/12
[Full-disclosure] Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability, Secunia Research, 2005/10/12
[Full-disclosure] Linux Orinoco drivers information leakage, Meder Kydyraliev, 2005/10/12
[Full-disclosure] [ GLSA 200510-11 ] OpenSSL: SSL 2.0 protocol rollback, Thierry Carrez, 2005/10/12
[Full-disclosure] [SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow, Gary Oleary-Steele, 2005/10/12
[Full-disclosure] [USN-202-1] KOffice vulnerability, Martin Pitt, 2005/10/12
Cenzic NASL plugins, sec stuff, 2005/10/12
- Re: Cenzic NASL plugins, Michael Boman, 2005/10/13
[SECURITY] [DSA 850-1] New tcpdump packages fix denial of service, Martin Schulze, 2005/10/12
[SECURITY] [DSA 851-1] New openvpn packages fix denial of service, Martin Schulze, 2005/10/12
[SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution, Martin Schulze, 2005/10/12
Announcement: The Web Application Firewall Evaluation Criteria v1, contact, 2005/10/11
PullThePlug Contest: Call For Papers, announcements, 2005/10/11
[SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1, max, 2005/10/11
- Re: [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1, Andreas Zeidler, 2005/10/12
versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover, rgod, 2005/10/11
FreeBSD Security Advisory FreeBSD-SA-05:21.openssl, FreeBSD Security Advisories, 2005/10/11
XSS vulnerability in Zeroblog, alireza hassani, 2005/10/11
[KDE Security Advisory] KOffice/KWord RTF import buffer overflow, Dirk Mueller, 2005/10/11
The Malloc Maleficarum, Phantasmal Phantasmagoria, 2005/10/11
[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability, Advisories, 2005/10/11
[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability, Advisories, 2005/10/11
[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability, Advisories, 2005/10/11
[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability, Advisories, 2005/10/11
CodeCon 2006 Call For Papers, Len Sassaman, 2005/10/11
[Full-disclosure] iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability, iDEFENSE Labs, 2005/10/11
[Full-disclosure] iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability, iDEFENSE Labs, 2005/10/11
[Full-disclosure] [USN-201-1] SqWebmail vulnerabilities, Martin Pitt, 2005/10/11
[Full-disclosure] Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities, Secunia Research, 2005/10/11
[Full-disclosure] [ GLSA 200510-10 ] uw-imap: Remote buffer overflow, Thierry Carrez, 2005/10/11
[Full-disclosure] [USN-200-1] Thunderbird vulnerabilities, Martin Pitt, 2005/10/11
[Full-disclosure] iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/10
[Full-disclosure] iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability, iDEFENSE Labs, 2005/10/10
[Full-disclosure] [USN-199-1] Linux kernel vulnerabilities, Martin Pitt, 2005/10/10
[Full-disclosure] phpMyAdmin Local file inclusion 2.6.4-pl1, Maksymilian Arciemowicz, 2005/10/10
[Full-disclosure] [USN-198-1] cfengine vulnerabilities, Martin Pitt, 2005/10/10
[Full-disclosure] [USN-197-1] Shorewall vulnerability, Martin Pitt, 2005/10/10
[Full-disclosure] [USN-196-1] Xine library vulnerability, Martin Pitt, 2005/10/10
[Full-disclosure] [USN-195-1] Ruby vulnerability, Martin Pitt, 2005/10/10
Antivirus detection bypass by special crafted archive., unsecure, 2005/10/08
- [Full-disclosure] Re: Antivirus detection bypass by special crafted archive., Thierry Zoller, 2005/10/09
  - RE: [Full-disclosure] Re: Antivirus detection bypass by special craftedarchive., ad, 2005/10/09
- Re: Antivirus detection bypass by special crafted archive., Williams, James K, 2005/10/14
MDKSA-2005:176 - Updated webmin package fixes authentication bypass vulnerability, Mandriva Security Team, 2005/10/08
MDKSA-2005:177 - Updated hylafax packages fix temporary file vulnerability, Mandriva Security Team, 2005/10/08
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting, retrogod, 2005/10/08
[Full-disclosure] [ GLSA 200510-09 ] Weex: Format string vulnerability, Sune Kloppenborg Jeppesen, 2005/10/08
[Full-disclosure] [ GLSA 200510-08 ] xine-lib: Format string vulnerability, Sune Kloppenborg Jeppesen, 2005/10/08
Re: Security contact for ..., Williams, James K, 2005/10/07
Utopia News Pro 1.1.3 SQL Injection / cross site scripting, retrogod, 2005/10/07
Re: [Dailydave] Security contact for ..., security curmudgeon, 2005/10/07
Aenovo Multiple Vulnerabilities, advisory, 2005/10/07
[Full-disclosure] gnome-pty-helper writes arbitrary utmp records, Paul Szabo, 2005/10/07
MDKSA-2005:175 - Updated texinfo packages fix temporary file vulnerability, Mandriva Security Team, 2005/10/07
MDKSA-2005:174 - Updated mozilla-thunderbird packages fix multiple vulnerabilities, Mandriva Security Team, 2005/10/07
MDKSA-2005:173 - Updated mozilla-firefox packages fix vulnerabilities, Mandriva Security Team, 2005/10/07
MDKSA-2005:172 - Updated openssh packages fix GSSAPI credentials vulnerability, Mandriva Security Team, 2005/10/07
Shutdown TNS Listener via Oracle Forms Servlet, ak, 2005/10/07
Shutdown TNS Listener via Oracle iSQL*Plus, ak, 2005/10/07
Cross-Site-Scripting Vulnerability in Oracle XMLDB, ak, 2005/10/07
[Full-disclosure] [ GLSA 200510-07 ] RealPlayer, Helix Player: Format string vulnerability, Thierry Carrez, 2005/10/07
Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus, ak, 2005/10/07
Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB, ak, 2005/10/07
Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB, ak, 2005/10/07
[security bulletin] SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access, security-alert, 2005/10/07
[security bulletin] SSRT051043 rev.0 - Apache Remote Unauthorized access, security-alert, 2005/10/07
[Full-disclosure] MailEnable W3C Logging Remote Buffer Overflow Proof of Concept, advisory, 2005/10/07
- Re: [Full-disclosure] MailEnable W3C Logging Remote Buffer Overflow Proof of Concept, user1, 2005/10/07
xloadimage buffer overflow., Ariel Berkman, 2005/10/06
Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, David Litchfield, 2005/10/06
- Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Rainer Duffner, 2005/10/06
  - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, David Litchfield, 2005/10/06
    - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Rainer Duffner, 2005/10/06
    - Re: Opinion: Complete failure of Oracle security response and utter neglect of t, Silent / Saracoth, 2005/10/11
  - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Radoslav Dejanović, 2005/10/07
- Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Cesar, 2005/10/06
- Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Gadi Evron, 2005/10/07
  - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, David Litchfield, 2005/10/07
    - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Gadi Evron, 2005/10/07
    - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, David Litchfield, 2005/10/07
    - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Kurt Seifried, 2005/10/08
    - Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Tony Jambu, 2005/10/08
- Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Ivan ., 2005/10/07
- Re: Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, ak, 2005/10/07
High Risk Vulnerability in Sun Directory Server, NGSSoftware Insight Security Research, 2005/10/06
aspReady FAQ - open for SQL-injections, preben, 2005/10/06
[security bulletin] SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege, security-alert, 2005/10/06
WASC Threat Classification in 4 languages, contact, 2005/10/06
Planet Technology Corp FGSW2402RS switch default password / "backdoor", lms, 2005/10/06
[security bulletin] SSRT4743, SSRT4884 rev.1 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS), security-alert, 2005/10/06
[Full-disclosure] Secunia Research: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow, Secunia Research, 2005/10/06
[Full-disclosure] [ GLSA 200510-06 ] Dia: Arbitrary code execution through SVG import, Sune Kloppenborg Jeppesen, 2005/10/06
[Full-disclosure] [ GLSA 200510-05 ] Ruby: Security bypass vulnerability, Sune Kloppenborg Jeppesen, 2005/10/06
[Full-disclosure] [USN-194-1] texinfo vulnerability, Martin Pitt, 2005/10/06
[Full-disclosure] Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities, Secunia Research, 2005/10/06
- [Full-disclosure] Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities, vuln, 2005/10/06
[Full-disclosure] Secunia Research: Webroot Desktop Firewall Two Vulnerabilities, Secunia Research, 2005/10/06
Some new whitepapers ..., David Litchfield, 2005/10/05
- Re: Some new whitepapers ..., Jerome Athias, 2005/10/06
- RE: Some new whitepapers ..., Lila Buchalski, 2005/10/06
[VulnWatch] Patches available for critical flaws in HP Openview, NGSSoftware Insight Security Research, 2005/10/05
- Announcement : Core Banking Application Security List, Lila Buchalski, 2005/10/06
PAKCON II: Call for Paper (CfP), Final Call!, Ayaz Ahmed Khan, 2005/10/05
[Full-disclosure] Secunia Research: ALZip Multiple Archive Handling Buffer Overflow, Secunia Research, 2005/10/05
[Full-disclosure] [ GLSA 200510-04 ] Texinfo: Insecure temporary file creation, Thierry Carrez, 2005/10/05
[security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access, security-alert, 2005/10/04
[security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access, security-alert, 2005/10/04
[security bulletin] SSRT5940 rev.2 - HP-UX Mozilla remote, unauthorized user may execute privileged code, security-alert, 2005/10/04
[security bulletin] SSRT051040 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code, security-alert, 2005/10/04
A common researcher diagnosis error: misreading error messages, Steven M. Christey, 2005/10/04
[Full-disclosure] RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/04
[Full-disclosure] iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/04
[Full-disclosure] iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability, iDEFENSE Labs, 2005/10/04
[security bulletin] SSRT051041 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS), security-alert, 2005/10/04
[Full-disclosure] Re: Careless LEO Forensics and Suicides, J. Oquendo, 2005/10/04
- RE: [Full-disclosure] Re: Careless LEO Forensics and Suicides, Aditya Deshmukh, 2005/10/05
[Full-disclosure] [ GLSA 200510-03 ] Uim: Privilege escalation vulnerability, Sune Kloppenborg Jeppesen, 2005/10/04
Advisory: WZCS vulnerabilities, donctl, 2005/10/04
- RE: Advisory: WZCS vulnerabilities, Brian J. Bartlett, 2005/10/05
Call for Papers - DIMVA 2006, Thomas Biege, 2005/10/04
[Full-disclosure] [USN-155-3] Fixed mozilla locale packages, Martin Pitt, 2005/10/04
[Full-disclosure] [USN-193-1] dia vulnerability, Martin Pitt, 2005/10/04
RE: [Full-disclosure] Different Claims by ZoneLabs on the "BypassingPersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Todd Towles, 2005/10/03
- RE: [Full-disclosure] Different Claims by ZoneLabs on the "BypassingPersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Bart Lansing, 2005/10/04
- RE: [Full-disclosure] Different Claims by ZoneLabs on the "BypassingPersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Todd Towles, 2005/10/04
MDKSA-2005:171 - Updated kernel packages fix multiple vulnerabilities, Mandriva Security Team, 2005/10/03
Kaspersky Antivirus Remote Heap Overflow, list, 2005/10/03
Trillian remote crashable, philipp, 2005/10/03
Re: Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability, security, 2005/10/03
[Full-disclosure] Bypassing Personal Firewall, is it that* hard?, Bipin Gautam, 2005/10/03
- RE: [Full-disclosure] Bypassing Personal Firewall, is it that* hard?, Debasis Mohanty, 2005/10/03
  - RE: [Full-disclosure] Bypassing Personal Firewall, is it that* hard?, Debasis Mohanty, 2005/10/03
    - Re: [Full-disclosure] Bypassing Personal Firewall, is it that* hard?, Oliver Leitner, 2005/10/03
- RE: [Full-disclosure] Bypassing Personal Firewall, is it that* hard?, Aditya Deshmukh, 2005/10/04
- Re: [Full-disclosure] Bypassing Personal Firewall, is it that* hard?, Bipin Gautam, 2005/10/04
RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, Lachniet, Mark, 2005/10/03
- RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, L. Adrian Griffis, 2005/10/03
- RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, Neil Dickey, 2005/10/04
[Full-disclosure] [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files, Thierry Carrez, 2005/10/03
[Full-disclosure] [ GLSA 200510-01 ] gtkdiskfree: Insecure temporary file creation, Thierry Carrez, 2005/10/03
[Full-disclosure] Different Claims by ZoneLabs on the "Bypassing PersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Debasis Mohanty, 2005/10/01
- Re: [Full-disclosure] Different Claims by ZoneLabs on the "Bypassing PersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Paul Laudanski, 2005/10/02
  - RE: [Full-disclosure] Different Claims by ZoneLabs on the "Bypassing PersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Debasis Mohanty, 2005/10/02
- RE: [Full-disclosure] Different Claims by ZoneLabs on the "Bypassing PersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Paul Laudanski, 2005/10/03
  - RE: [Full-disclosure] Different Claims by ZoneLabs on the "Bypassing PersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Debasis Mohanty, 2005/10/03
- RE: [Full-disclosure] Different Claims by ZoneLabs on the "Bypassing PersonalFirewall (Zone Alarm Pro) Using DDE-IPC" issue, Paul Laudanski, 2005/10/03
[Full-disclosure] Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, Jason Coombs, 2005/10/01
- Re: [Full-disclosure] Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, Steve Kudlak, 2005/10/02
- [Full-disclosure] RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, dave kleiman, 2005/10/04
- [Full-disclosure] Re: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, Stefano Zanero, 2005/10/04
- RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides, dave kleiman, 2005/10/04
Security Advisory for Bugzilla 2.18.3, 2.20rc2, and 2.21, mkanat, 2005/10/01
[Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail, bambenek, 2005/10/01
MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass, retrogod, 2005/10/01
RE: [Full-disclosure] Re: Bypassing Personal Firewall (Zone Alarm Pro)Using DDE-IPC, Debasis Mohanty, 2005/10/01